ClearCorridor
Freight Compliance Platform

Privacy Notice

CCA-PRIV-001 · v1.1 · clearcorridor.co.za

1. Who We Are

1.1ClearCorridor Technology (Pty) Ltd (Reg No 2026/458219/07) (“ClearCorridor”, “we”) operates the ClearCorridor freight compliance platform. We are the responsible party for personal information processed on the platform and this website, under the Protection of Personal Information Act 4 of 2013 (“POPIA”).

1.2Information Officer: Haydn Friis. Contact: through the platform, or privacy@clearcorridor.co.za (formal requests only).

2. What We Collect

2.1Entity and account information: registered names, registration numbers, addresses, contact persons and their business contact details.

2.2Identity information of disclosed natural persons: names, identity or passport numbers and nationality of directors, beneficial owners and, where applicable, trustees — provided at admission for screening.

2.3Driver information (Carrier accounts): names, identity numbers, licence and professional driving authorisation details (in South Africa, PrDP), medical fitness and right-to-work status, and passport details where cross-border eligible.

2.4Banking details of Carriers, captured for in-platform display to engaged counterparties.

2.5Documents uploaded to the platform, and the platform record: a time-stamped log of actions taken on the platform identifying the acting user.

3. Why We Process It

3.1Admission and recurring compliance screening against recognised sanctions, criminal and politically-exposed-person watchlists; compliance scoring; maintaining engagement records (Cargo Movement Requests, Carrier Engagement Confirmations, proof-of-delivery records); administering ClearCorridor fees; fraud prevention (including banking-detail display and change control); meeting legal obligations; and maintaining the platform audit record.

3.2Lawful bases: your consent recorded at activation; performance of the platform agreements; our legitimate interests in platform integrity and fraud prevention; and compliance with law.

3.3No decision with legal or similarly significant consequences for a person is taken solely by automated means: all consequential determinations require human confirmation.

4. Where It Comes From and Who Sees It

4.1We collect information from you, from public registries (including CIPC for South African–registered participants) and from screening providers.

4.2Counterparties on the platform see only what an engagement decision requires under the platform agreements, such as standing, declared insurance and declared incidents and documents you choose to release. Identity documents of natural persons are never released to counterparties without your consent on each occasion.

4.3Operators processing on our behalf: hosting and infrastructure providers, screening providers, email dispatch, and accounting systems, each bound to confidentiality and security obligations. We do not sell personal information.

4.4Disclosure to regulators, courts or authorities where required by law.

5. Cross-Border Transfers

5.1Screening and infrastructure providers may process information outside South Africa. Transfers are made under section 72 of POPIA: with your consent recorded at activation, where necessary for the performance of the platform agreements, and to recipients subject to contractual obligations providing an adequate level of protection.

6. Retention and Security

6.1Entity and compliance records are retained for 7 years from account closure; financial and invoice records for 10 years; thereafter records are deleted under the platform retention process, which is itself logged.

6.2Safeguards include encryption in transit and at rest, role-based access control, screening of access, and the append-only platform audit record.

7. Your Rights

7.1You may request access to your personal information (see our PAIA Manual, CCA-PAIA-001), request correction or deletion, object to processing, and withdraw consent (which may affect platform participation). Requests: through the platform or to the Information Officer.

7.2You may complain to the Information Regulator (South Africa): JD House, 27 Stiemens Street, Braamfontein, Johannesburg; POPIAComplaints@inforegulator.org.za.

8. Cookies and Website

8.1Our public website sets no cookies and runs no analytics. The portals use strictly necessary session storage for authentication only.

9. Changes

9.1We may update this Notice. The version current at your acceptance is recorded with your acceptance; material changes are notified through the platform. This Notice is governed by the laws of the Republic of South Africa.